CVE-2019-9193
84Vexday Risk Score
Corrige ahora. Ella explotación observada por VulnCheck y tiene exploit funcional público.
ssvc Actepss 92%
de la publicación al arma37 días
Publicada en NVD1 abr
1ª PoC+37d
metasploit20 mar
VulnCheck+662d
probabilidad de explotación
92%top 1% de las CVE
explotación observada
síVulnCheck
22 exploit(s) público(s)
In PostgreSQL 9.3 through 11.2, the "COPY TO/FROM PROGRAM" function allows superusers and users in the 'pg_execute_server_program' group to execute arbitrary code in the context of the database's operating system user. This functionality is enabled by default and can be abused to run arbitrary operating system commands on Windows, Linux, and macOS. NOTE: Third parties claim/state this is not an issue because PostgreSQL functionality for ‘COPY TO/FROM PROGRAM’ is acting as intended. References state that in PostgreSQL, a superuser can execute commands as the server user without using the ‘COPY FROM PROGRAM’.
Productos afectados
n/a · n/aPoCs públicas encontradas — 22✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/46813githubgithub.com/b4keSn4ke/CVE-2019-9193★ 21githubgithub.com/geniuszly/CVE-2019-9193★ 4githubgithub.com/wkjung0624/cve-2019-9193★ 3githubgithub.com/paulotrindadec/CVE-2019-9193★ 1githubgithub.com/netw0rk7/CVE-2019-9193-Home-Lab★ 0githubgithub.com/corsisechero/CVE-2019-9193byVulHub★ 0githubgithub.com/CybersRMUTL/CVE-2019-9193-Postgresql-RCE★ 0githubgithub.com/jhnhnck/CVE-2019-9193★ 0vulncheckvulncheck.com/xdb/7917b63fa40fno verificadovulncheckvulncheck.com/xdb/1736beb5bce4no verificadovulncheckvulncheck.com/xdb/18caab4f43c9no verificadovulncheckvulncheck.com/xdb/acb3ad6082cbno verificadovulncheckvulncheck.com/xdb/3bde608f037cno verificadocve_referencepacketstormsecurity.com/files/166540/PostgreSQL-11.7-Remote-Code-Execution.htmlno verificadocve_referencepacketstormsecurity.com/files/171722/PostgreSQL-9.6.1-Remote-Code-Execution.htmlno verificadovulncheckvulncheck.com/xdb/6272649d9a3bno verificadocve_referencepacketstormsecurity.com/files/152757/PostgreSQL-COPY-FROM-PROGRAM-Command-Execution.htmlno verificadovulncheckvulncheck.com/xdb/7163ff91f6bbno verificadovulncheckvulncheck.com/xdb/e86cc1c8300ano verificadovulncheckvulncheck.com/xdb/ae385be7fbf9no verificadovulncheckvulncheck.com/xdb/d49085c8a0deno verificado⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
http://packetstormsecurity.com/files/152757/PostgreSQL-COPY-FROM-PROGRAM-Command-Execution.htmlhttp://packetstormsecurity.com/files/166540/PostgreSQL-11.7-Remote-Code-Execution.htmlhttp://packetstormsecurity.com/files/171722/PostgreSQL-9.6.1-Remote-Code-Execution.htmlhttps://blog.hagander.net/when-a-vulnerability-is-not-a-vulnerability-244/https://medium.com/greenwolf-security/authenticated-arbitrary-command-execution-on-postgresql-9-3-latest-cd18945914d5https://paquier.xyz/postgresql-2/postgres-9-3-feature-highlight-copy-tofrom-program/https://security.netapp.com/advisory/ntap-20190502-0003/https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/authenticated-arbitrary-command-execution-on-postgresql-9-3/